In the jerakia.yaml configuration file, we configure the encryption option with a provider of Vault and the specific configuration that our provider requires:
encryption:
provider: vault
vault_addr: http://127.0.0.1:8200
vault_use_ssl: false
vault_role_id: bfce3860-0805-43dc-ab6d-fe789559fe32
vault_secret_id: 8a2fa99c-7811-5e65-a74a-8ab2ba9b6389
vault_keyname: jerakia
We should now be able to encrypt and decrypt using Jerakia:
$ jerakia secret encrypt mySecret
vault:v1: d3HftM8HAJDwWeSfLkBcdpAdTFy8fBu3mj4Kf3mHADSLuevwCbjZ
$ jerakia secret decrypt vault:v1:d3HftM8HAJDwWeSfLkBcdpAdTFy8fBu3mj4Kf3mHADSLuevwCbjZ
mySecret